cuckoo-escapement/dashboard/deploy/Caddyfile.tmpl

12 lines
501 B
Cheetah
Raw Normal View History

# gps-ntp dashboard front door. `make caddy` renders {{DOMAIN}} from .env.
#
# The cert is issued OFF-BOX and synced to the Pi (see `make cert-sync`) rather
# than obtained by Caddy itself. A time server usually lives on a LAN with no
# inbound reachability, so HTTP-01 can't work; use DNS-01 wherever you already
# run ACME and copy the result here.
{{DOMAIN}} {
tls /etc/caddy/certs/{{DOMAIN}}/fullchain.pem /etc/caddy/certs/{{DOMAIN}}/privkey.pem
encode zstd gzip
reverse_proxy 127.0.0.1:8080
}